Data Protection Policy

Policy Statement

G&L Consultancy Ltd’s data protection policy sets out the company’s commitment to protecting personal data and how that commitment is implemented with regards to the collection and use of personal data.

meeting legal obligations as laid down by the Data Protection Act 1998;

ensuring that data is collected and used fairly and lawfully;

processing personal data only in order to meet operational needs or fulfil legal requirements;

taking steps to ensure that personal data is up to date and accurate;

establishing appropriate retention periods for personal data;

ensuring that data subjects’ rights can be appropriately exercised;

providing adequate security measures to protect personal data;

ensuring that a nominated officer is responsible for data protection compliance and provides a point of contact for all data protection issues;

ensuring that all staff are made aware of good practice in data protection;

providing adequate training for all staff responsible for personal data;

ensuring that everyone handling personal data knows where to find further guidance;

ensuring that queries about data protection, internal and external to the organisation, is dealt with effectively and promptly;

regularly reviewing data protection procedures and guidelines within the organisation.

Scope of Policy

This policy applies to all members of staff within G&L Consultancy Ltd. For the purposes of this policy, the term “Staff” means all members of staff including permanent, fixed term, and temporary staff, staff on secondment, any third party representatives, agency workers, volunteers, interns, agents and sponsors engaged with the company in the UK or overseas.

All contractors and agents acting for or on behalf of G&L Consultancy will be made aware of this policy.

For the purposes of this data protection policy G&L Consultancy does not differentiate between the protection of personal data as prescribed by the Act and the protection of customers’ confidential information and proprietary rights and the protection, electronic storage and transmission of results. Further information on this can be obtained within the relevant sections of G&L Consultancy Ltd’s Quality Manual.

This document will also include the specific data protection policies G&L Consultancy Ltd has in place in relation to TEAMs (The Electronic Asbestos Management System) and its Client Portal.

Data Protection Principles

The Data Protection Act 1998 (‘the Act’) gives individuals the right to know what information is held about them and sets out legislative requirements for organisations processing personal data (referred to under the Act as ‘Data Controllers’). The Act came into force on the 1 March 2000.

The Act and the Freedom of Information Act 2000 are overseen and enforced by the Information Commissioners Office (ICO), who is an independent public body responsible directly to Parliament.

G&L Consultancy Ltd, as a data controller, will be open and transparent when processing and using personal information by following the eight principles as set out in the Act, as listed previously:

Personal data shall be processed fairly and lawfully.

Personal data shall be obtained for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that purpose or those purposes.

Personal data shall be adequate, relevant and not excessive in relation to the purpose or purposes for which they are processed.

Personal data shall be accurate and, where necessary, kept up to date.

Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

Personal data shall be processed in accordance with the rights of data subjects under the Data Protection Act 1998.

Appropriate technical and organisational measures shall be taken against unauthorised and unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.

Personal data shall not be transferred to a country or territory outside the European Economic Area unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

Definitions

This policy applies to all personal and sensitive personal data processed and stored electronically and manually (paper based) files. It aims to protect and promote the rights of individuals (“Data Subjects”) and G&L Consultancy Ltd (“Company”).

Personal Data

Any information which relates to a living individual who can be or may be identified from that information, for example:

A person’s name and address (postal and email)

Date of birth

Statement of fact

Any expression or opinion communicated about an individual

Minutes of meetings, reports

Emails, file notes, handwritten notes, sticky notes

CCTV footage and / or photographs if an individual can be identified by the footage / images

Employment applications

Spreadsheets and / or databases with any list of people set up by code or staff number

Employment history

Sensitive Personal Data

Any information relating to an individual’s:

Ethnicity

Gender

Religious or other beliefs

Political opinions

Membership of a trade union

Sexual orientation

Medical history

Offences committed or alleged to have been committed by that individual

Data Subject

Any living individual who is the subject of personal data whether in a personal or business capacity

G&L Consultancy Ltd recognises and understands the consequences of failure to comply with the requirements of the Act may result in:

Criminal and civil action;

Fines and damages;

Personal accountability and liability;

Suspension / withdrawal of the right to process personal data by the Information Commissioners Office (ICO);

Loss of confidence in the integrity of the Company’s systems and procedures;

Irreparable damage to the Company’s reputation.

Where staff do not comply with this policy, the Company may also consider taking action in accordance with the Company’s established Disciplinary Procedure.

Staff Obligations

Staff will not gain access to information that is not necessary to hold, know or process. All information which is held will be relevant and accurate for the purpose for which it is required. The information will not be kept for longer than is necessary and will be kept secure at all times.

Staff will ensure that all personal or sensitive personal information is anonymised as part of any evaluation of assets and liability assessments except as required by law.

Staff who manage and process personal or sensitive personal information will ensure that it is kept secure and where necessary confidential. Sensitive personal information will only be processed in line with the provisions set out in this policy.

Staff are responsible for notifying their line manager or the Data Protection and Freedom of Information Manager if they believe or suspect that a conflict with this policy has occurred, or may occur in the future. This includes notification of any actual or suspected data breach.

Company (Data Controller) Obligations

The Company will follow the Code of Practice issued by the ICO when developing policies and procedure in relation to data protection.

The Company will ensure that Data Processing and / or Sharing Agreements are applied to all contracts and management agreements where the Company is the data controller contracting out services and processing of personal data to third parties (data processors).

The Company will ensure this agreement clearly outlines the roles and responsibilities of both the data controller and the data processor.

The Company will adhere to and follow the eight principles of data protection and the Privacy & Electronic Communications (PEC) Regulations when conducting surveys, marketing activities etc and where the Company collects, processes, stores and records personal data.

The Company will not transfer or share personal information with countries outside of the European Economic Area (EEA) unless that country has a recognised adequate level of protection in place in line with the recommendations outlined in the Act.

The Company will ensure all staff are provided with data protection training and promote the awareness of the Company’s data protection and information security policies, procedures and processes.

Data Subjects Rights

The Company acknowledges individuals (data subjects) rights under the Act to access any personal data held on our systems and in our files upon their request, or to delete and / or correct this information if it is proven to be inaccurate, excessive or out of date.

The Company recognises that individuals have the right to make a request in writing and upon payment of a fee, to obtain a copy of their personal information, if held on our systems and files.

The Company recognises that individuals have the right to prevent data processing where it is causing them damage or distress, or to opt out of automated decision-making and stop direct marketing.

The Company will only share information in accordance with the provisions set out in the Act and where applicable the Company will inform individuals of the identity of third parties to whom we may share, disclose or be required to pass on information to, whilst accounting for any exemptions which may apply under the Act.

TEAMs Client Portal Specific Protection

In addition to the protection offered under the Data Protection Act 1998 and described in this policy, G&L Consultancy Ltd has set out the following protection and information regarding TEAMs (The Electronic Asbestos Management System) Client Portal.

Mark One Consultants also act in the capacity of both TEAMs software developers and online security consultants.

The TEAMs Client Portal is hosted on a secure server and is accessed through a secure gateway, denoted by the ‘https’ URL prefix and the image of a padlock in the address bar.

Mark One Consultants and G&L Consultancy Ltd are signatories to a separate non-disclosure and confidentially agreement which includes the TEAMs portal and servers.

Portal Log in Details

In order to gain access to the TEAMs Client Portal all users require a valid email address, username and password.

Different levels of access can be allocated to different users for the same client.

User access is achieved by the named client representative requesting access, in writing and include the following information:

Name(s) of third party;

Email address(es) of third party;

Level of required access;

Date access required from;

Date access should be rescinded.

G&L Consultancy Ltd will then set up the correct level of access and provide an individually generated password which is emailed directly to the named user.

It remains the client’s responsibility to ensure that user details and access levels required are kept current and up to date and that they notify G&L Consultancy Ltd if any access requires removal.

Authorised Third Party Access

Only those persons with a valid username and password can access the portal, this includes the employees of both G&L Consultancy Ltd and Mark One Consultants.

If third party access is required as requested by a client, this request must be received in writing and include the following information:

Name(s) of third party;

Email address(es) of third party;

Level of required access;

Date access required from;

Date access should be rescinded.

Unauthorised Third Party Access (“Hacking”)

In the event of a malicious attack on the portal or an attempt to gain access by circumnavigating the built in security protocols, Mark One Consultants have in their hosting capacity a number of security options available in order to deflect / defeat the attack / hack up to and including taking the portal in its entirety off line until the issue(s) have been identified and dealt with.

Downloading of Data

Data present on the TEAMs client portal can only be downloaded by an authorised user and only at the access level they have been granted.

The portal retains an audit trail of each action and this includes:

Category of action

User name

Reference number

IP address

Time of action

Retention of Data

All data uploaded to the client portal by any party will be retained until such time as notice is received in writing from the client that the data is no longer required.

In the event that a client no longer wishes to use the services of G&L Consultancy Ltd but does require continued access to the portal, the access and all responsibility for the data stored on the portal will transfer to the client.

What information do we collect from visitors to our website?

We collect two kinds of information from visitors to asbestosspecialist.co.uk:

feedback (through emails to our Internet services team)

site usage information from log files

Correspondents should note that all communications to or from G & L Consultancy Ltd may be automatically logged, monitored and/or recorded for lawful purposes.

Confidentiality

We make every effort to safeguard the information that you provide to us.

Log files

We use our website server log files to identify patterns of website use to enable us to improve the service we offer our site visitors. We do not use them to identify individual users of our website.

Complaints

Individuals who wish to make a complaint relating to breaches of the Data Protection Act 1998 and / or complaints that an individual’s personal information is not being processed in line with this policy may do so in writing to:

Julie Lewis, Quality Director

G&L Consultancy Ltd

Unit 5A Chelston Business Park

Castle Road

Wellington

Somerset

TA21 9JQ

This policy has been endorsed by Julie Lewis and has the full support of the management team.

The policy was reviewed and approved on 22nd January 2018 following consultation with senior managers and workers.

Overall responsibility for the effectiveness of the policy lies with Julie Lewis, Quality Director. For more information, please contact this person: 01823 443 898

Course Details

The BOHS P402 course is a requirement for all survey staff in UKAS accredited survey companies and is the recognised

more

Course Details

The BOHS P402 course is a requirement for all survey staff in UKAS accredited survey companies and is the recognised industry standard for all asbestos surveyors.

The course provides background and practical knowledge in the surveying of buildings for asbestos and to provide general guidance on management procedures necessary to minimise exposure to any identified asbestos.

A two-day course with a further day of written and practical examinations. A successful completion of the examinations and the subsequent survey reports will lead to a: ‘Proficiency Certificate’ in Building Surveys and Bulk Sampling for Asbestos.

Candidates for this course are expected to be aware of the contents of HSG 264 (Asbestos: The Survey Guide) and have a minimum of six months prior experience of carrying out asbestos surveys.

This course will require approximately 16 hours’ study time, of which at least 12 hours will be taught (teaching and practical). The additional study time will be required in the candidates’ own time.

Course Examination / Assessment

The students would be assessed as follows:

40 short answer questions to be answered in 120 minutes.

A practical assessment carried out by an approved practical assessor as detailed below.

Candidates are required to demonstrate that they have carried out, possibly under supervision, two field surveys for asbestos, which must include sampling, analysis and a material assessment.

Practical Assessment:

Slide/video/photographic assessment procedure for identifying the presence of asbestos in different locations which must include a variety of asbestos products, confirm basic understanding of buildings and structures and use of material and priority assessments

Level of intrusion required for the different types of survey and situations where segregation would be necessary plus the appropriate methods to achieve this.

Full procedure for taking samples

Use of PPE and RPE plus personal decontamination.

Report Submission:

Candidates are required to demonstrate that they have carried out, possibly under supervision, two field surveys for asbestos, which must include sampling, analysis and a material assessment.

A copy of each of these two relevant reports must be submitted to BOHS within three months.

Course Details

Face fit testing ensures that an adequate seal can be formed between the face seal of the chosen respirator and the wearer’s face.
After conducting a workplace assessment, it is no

more

Course Details

Face fit testing ensures that an adequate seal can be formed between the face seal of the chosen respirator and the wearer’s face.

After conducting a workplace assessment, it is no longer enough to supply a respirator, which meets a particular standard. It is the employer’s duty to ensure that an employee can obtain an effective face seal with the chosen RPE. No two faces are the same and therefore, despite advances in respiratory technology, one tight fitting respirator will not fit everyone.

Face fit testing as part of the respirator selection process saves time, money and is an investment in the safety and well-being of the workforce.

G&L Consultancy can provide either quantitative or qualitative face fit testing at our offices in Somerset and Northern Ireland, or at your chosen workplace as required.

Course Details

Face fit testing ensures that an adequate seal can be formed between the face seal of the chosen respirator and the wearer’s face.
After conducting a workplace assessment, it is no

more

Course Details

Face fit testing ensures that an adequate seal can be formed between the face seal of the chosen respirator and the wearer’s face.

After conducting a workplace assessment, it is no longer enough to supply a respirator, which meets a particular standard. It is the employer’s duty to ensure that an employee can obtain an effective face seal with the chosen RPE. No two faces are the same and therefore, despite advances in respiratory technology, one tight fitting respirator will not fit everyone.

Face fit testing as part of the respirator selection process saves time, money and is an investment in the safety and well-being of the workforce.

G&L Consultancy can provide either quantitative or qualitative face fit testing at our offices in Somerset and Northern Ireland, or at your chosen workplace as required.

Course Details

Face fit testing ensures that an adequate seal can be formed between the face seal of the chosen respirator and the wearer’s face.
After conducting a workplace assessment, it is no

more

Course Details

Face fit testing ensures that an adequate seal can be formed between the face seal of the chosen respirator and the wearer’s face.

After conducting a workplace assessment, it is no longer enough to supply a respirator, which meets a particular standard. It is the employer’s duty to ensure that an employee can obtain an effective face seal with the chosen RPE. No two faces are the same and therefore, despite advances in respiratory technology, one tight fitting respirator will not fit everyone.

Face fit testing as part of the respirator selection process saves time, money and is an investment in the safety and well-being of the workforce.

G&L Consultancy can provide either quantitative or qualitative face fit testing at our offices in Somerset and Northern Ireland, or at your chosen workplace as required.

Course Details

Regulation 10 of ‘The Control of Asbestos Regulations 2012’ places a duty on employers to ensure that all employees who are liable to be exposed to asbestos receive adequate information,

more

Course Details

Regulation 10 of ‘The Control of Asbestos Regulations 2012’ places a duty on employers to ensure that all employees who are liable to be exposed to asbestos receive adequate information, instruction and training.This course covers the following topics: Introduction to Asbestos, Health Effects of Asbestos, Asbestos Legislation, Asbestos Containing Materials, Emergency Procedures and Avoiding the Risks of Asbestos.

Regulation 10 of ‘The Control of Asbestos Regulations 2012’ places a duty on employers to ensure that all employees who are liable to be exposed to asbestos receive adequate information, instruction and training and there is an increased duty on those employees who will knowingly disturb asbestos containing materials through the course of their work.This course covers the following topics: Introduction to Asbestos, Health Effects of Asbestos, Asbestos Containing Materials, Asbestos Legislation, Responsibilities, Risk Assessments & Plans of Work, Methods & Equipment and HSE Task Sheets.

Course Details

Face fit testing ensures that an adequate seal can be formed between the face seal of the chosen respirator and the wearer’s face.
After conducting a workplace assessment, it is no

more

Course Details

Face fit testing ensures that an adequate seal can be formed between the face seal of the chosen respirator and the wearer’s face.

After conducting a workplace assessment, it is no longer enough to supply a respirator, which meets a particular standard. It is the employer’s duty to ensure that an employee can obtain an effective face seal with the chosen RPE. No two faces are the same and therefore, despite advances in respiratory technology, one tight fitting respirator will not fit everyone.

Face fit testing as part of the respirator selection process saves time, money and is an investment in the safety and well-being of the workforce.

G&L Consultancy can provide either quantitative or qualitative face fit testing at our offices in Somerset and Northern Ireland, or at your chosen workplace as required.

Course Details

1st, 8th, 15th 22nd February & 1st March.
The BOHS P405 course is recommended for those wishing to comply with regulation 4 of the Control of Asbestos Regulations 2012 - The

more

Course Details

1st, 8th, 15th 22nd February & 1st March.

The BOHS P405 course is recommended for those wishing to comply with regulation 4 of the Control of Asbestos Regulations 2012 – The Duty to Manage.

The course provides a practical knowledge and the skills at be able to manage asbestos in buildings and to provide a basic knowledge of asbestos removal procedures.

A four-day course with a further day of written and practical examinations being run over five consecutive weeks. A successful completion of the examinations will lead to a: ‘PROFICIENCY CERTIFICATE’ in MANAGEMENT OF ASBESTOS IN BUILDINGS.

Testimonials

“The training provided by G&L was first Class. They tailored the session to suit our business needs and our staff learned a great deal about the asbestos industry and the impacts it can have on our work. G&L made a very technical subject, easy to understand. We would have no issue inviting them again to carry out refresher training for Continue Reading

Asbestos Training

We were in need of some immediate remediation work on an asbestos cladded building. G&L provided an excellent service helping us to comply with not only our Asbestos legal obligations but also our ethical obligations to reduce risks to our employees and neighbouring businesses. The site team were professional, polite, very helpful, clean and safe at all times. The end Continue Reading

TODS AEROSPACE

From past experience, I have always found G&L Analysts to be very efficient in all aspects of their works.

GIlpin Environmental

“Since commencement of the Asbestos Framework for Properties Division (Lot 1 – North) in February 2016, G&L Consultancy Ltd have delivered an excellent service to the Division’s wide and varied Customer-base. Their survey reports and advice received to date, have been of the highest quality and their commitment to meeting demanding completion targets, equally impressive. Properties Division looks forward to Continue Reading

Department of Finance – Northern Ireland

Darren was a terrific tutor – Very engaging, thanks. Mark Nowak – Exeter City Council

Asbestos Awareness Training

I would like to take this opportunity to thank Darren Alway for holding a great training course for licensed contract managers last week. I took a lot away with me and thoroughly enjoyed myself over the two days. Darren was a great help and delivered interesting and relevant information and guidance. The ladies in reception were very polite and welcoming, Continue Reading

Jenny Drouet – Shield Environmental Services Ltd

Training – ‘Overall a very good course. The tutor was excellent, with a very sound knowledge + also willing to listen. A good day well spent

Tony Zbijowski – Danisco (UK) – Dupont

Training – ‘It was clearly and comprehensively shared information to the group with an opportunity to participate and put questions forward

Caroline Barber – Danisco (UK) – DuPont

The quality of service and helpfulness from G&L has been excellent. Moreover, despite expecting the Report to take 10 days I have received it in a little over 24 hours from the physical inspection being completed; truly outstanding, and very much appreciated as it has enabled me to take my refurbishment project forward quickly. Thank you all very much.

Mr John Widger

In my experience the G & L service is quick and efficient.

M W Consultancy Ltd

Always find the work carried out is always of a very high standard.

Shield Environmental Services Ltd

Always friendly always help out if needed, happy to use G & L Consultancy Ltd.

Tru Environmental Ltd

To date on this new site project within Portadown the service provided was professional and competent and the received survey reports were a vital component compiling the sites asbestos register.

Kingspan Environmental Europe

All G & L staff have acted in an efficient and professional manner at all times. Equally all reports have been of a high standard.

Somerset College of Art & Technology

I have always found G & L Consultancy service standard to be very high with all staff being very knowledgeable and helpful.

Red Sky Group

A very reliable and competitive service. I would have and will continue to recommend G & L to all my clients.

Precision Industrial Services

There are times when we rely on advice from an analyst and G & L have always given sound advice and are always helpful.

University of Ulster

I would just like to comment on the prompt and efficient service that we received. All comments and queries were responded to promptly and with great patience!

Commercial Graphics (NI) Ltd

The service provided in all respects has been very professional and also of good quality and the company has shown caring positive attitude in all respects to nature of work.

N I Housing Executive

Efficient, professional and responded well at short notice without compromising service.

McDonalds

The survey and remedials were both first class. The survey was so extensive and detailed and the surveyor and all staff were very knowledgeable. Everything from the quote to the completed site file was first class and I shall definitely be recommending G & L to all Jockey Club Racecourses.